Security Testing MCQs

Which of the following best describes security testing?

a) Ensuring system is protected against threats

b) Ensuring system performance under load

c) Ensuring system integration correctness

d) Ensuring system usability

View Answer

Correct answer: A — Ensuring system is protected against threats
Vulnerability scanning is used to:

a) Detect known security weaknesses

b) Validate functional correctness

c) Validate performance

d) Validate integration

View Answer

Correct answer: A — Detect known security weaknesses
Penetration testing focuses on:

a) Simulating real-world attacks

b) Validating performance

c) Validating usability

d) Validating integration

View Answer

Correct answer: A — Simulating real-world attacks
Which tool is commonly used for penetration testing?

a) Metasploit

b) Selenium

c) JUnit

d) PyTest

View Answer

Correct answer: A — Metasploit
OWASP ZAP is used for:

a) Web application security testing

b) Database performance testing

c) Functional unit testing

d) Integration testing

View Answer

Correct answer: A — Web application security testing
Which of the following is NOT a security testing type?

a) Vulnerability scanning

b) Penetration testing

c) Load testing

d) Risk assessment

View Answer

Correct answer: C — Load testing
Static Application Security Testing (SAST) analyzes:

a) Source code for vulnerabilities

b) System performance under load

c) Integration correctness

d) Usability

View Answer

Correct answer: A — Source code for vulnerabilities
Dynamic Application Security Testing (DAST) analyzes:

a) Running applications for vulnerabilities

b) Source code only

c) Database schema only

d) Integration correctness

View Answer

Correct answer: A — Running applications for vulnerabilities
Which of the following is true about penetration testing?

a) It simulates hacker attacks

b) It validates only performance

c) It validates only usability

d) It validates only integration

View Answer

Correct answer: A — It simulates hacker attacks
OWASP Top 10 refers to:

a) Common web application vulnerabilities

b) Common performance bottlenecks

c) Common usability issues

d) Common integration issues

View Answer

Correct answer: A — Common web application vulnerabilities
What will be printed?

1 System.out.println("Eduinq Security Test");

a) Eduinq Security Test

b) Security Test

c) No output

d) Error

View Answer

Correct answer: A — Eduinq Security Test
Which of the following is true about vulnerability scanning?

a) It identifies known weaknesses

b) It validates performance

c) It validates usability

d) It validates integration

View Answer

Correct answer: A — It identifies known weaknesses
Penetration testing is also known as:

a) Ethical hacking

b) Stress testing

c) Load testing

d) Usability testing

View Answer

Correct answer: A — Ethical hacking
Which of the following is a security testing tool?

a) Burp Suite

b) JMeter

c) Selenium

d) PyTest

View Answer

Correct answer: A — Burp Suite
Risk assessment in security testing involves:

a) Identifying and prioritizing risks

b) Validating performance

c) Validating usability

d) Validating integration

View Answer

Correct answer: A — Identifying and prioritizing risks
Which of the following is NOT part of OWASP Top 10?

a) SQL Injection

b) Cross-Site Scripting

c) Load imbalance

d) Broken Authentication

View Answer

Correct answer: C — Load imbalance
Security regression testing ensures:

a) Fixes do not introduce new vulnerabilities

b) Performance remains stable

c) Usability remains intact

d) Integration remains correct

View Answer

Correct answer: A — Fixes do not introduce new vulnerabilities
Which of the following is true about DAST?

a) It tests applications at runtime

b) It tests source code only

c) It tests database schema only

d) It tests integration only

View Answer

Correct answer: A — It tests applications at runtime
SAST is performed:

a) On source code before execution

b) On applications at runtime

c) On database schema

d) On integration modules

View Answer

Correct answer: A — On source code before execution
Which of the following is true about Burp Suite?

a) It is used for web application security testing

b) It is used for performance testing

c) It is used for usability testing

d) It is used for integration testing

View Answer

Correct answer: A — It is used for web application security testing
Which of the following is true about SQL Injection?

a) It exploits improper input validation

b) It validates performance

c) It validates usability

d) It validates integration

View Answer

Correct answer: A — It exploits improper input validation
Cross-Site Scripting (XSS) attacks target:

a) Client-side scripts in web pages

b) Database schema

c) Integration modules

d) Performance bottlenecks

View Answer

Correct answer: A — Client-side scripts in web pages
Which of the following is a preventive measure against SQL Injection?

a) Parameterized queries

b) Manual logging

c) Performance monitoring

d) Integration testing

View Answer

Correct answer: A — Parameterized queries
Which of the following is true about authentication testing?

a) It validates login mechanisms

b) It validates performance

c) It validates usability

d) It validates integration

View Answer

Correct answer: A — It validates login mechanisms
Which of the following is a common vulnerability in web applications?

a) Broken Authentication

b) Load imbalance

c) Usability issues

d) Integration errors

View Answer

Correct answer: A — Broken Authentication
Security testing includes:

a) Vulnerability scanning, penetration testing, risk assessment

b) Only performance testing

c) Only usability testing

d) Only integration testing

View Answer

Correct answer: A — Vulnerability scanning, penetration testing, risk assessment
Which of the following is true about HTTPS?

a) It encrypts communication between client and server

b) It validates performance

c) It validates usability

d) It validates integration

View Answer

Correct answer: A — It encrypts communication between client and server
Which of the following is a tool for vulnerability scanning?

a) Nessus

b) JMeter

c) Selenium

d) PyTest

View Answer

Correct answer: A — Nessus
Which of the following is true about CSRF (Cross-Site Request Forgery)?

a) It tricks users into executing unwanted actions

b) It validates performance

c) It validates usability

d) It validates integration

View Answer

Correct answer: A — It tricks users into executing unwanted actions
Which of the following is a preventive measure against XSS?

a) Input sanitization

b) Performance monitoring

c) Usability testing

d) Integration testing

View Answer

Correct answer: A — Input sanitization
What will be printed?

1 System.out.println("Eduinq Security Vulnerability Test");

a) Eduinq Security Vulnerability Test

b) Security Vulnerability Test

c) No output

d) Error

View Answer

Correct answer: A — Eduinq Security Vulnerability Test
Which of the following is true about password policies?

a) They enforce strong authentication

b) They validate performance

c) They validate usability

d) They validate integration

View Answer

Correct answer: A — They enforce strong authentication
Which of the following is a common vulnerability in APIs?

a) Broken Object Level Authorization

b) Load imbalance

c) Usability issues

d) Integration errors

View Answer

Correct answer: A — Broken Object Level Authorization
Which of the following is true about encryption testing?

a) It validates data confidentiality

b) It validates performance

c) It validates usability

d) It validates integration

View Answer

Correct answer: A — It validates data confidentiality
Which of the following is a preventive measure against CSRF?

a) CSRF tokens

b) Performance monitoring

c) Usability testing

d) Integration testing

View Answer

Correct answer: A — CSRF tokens
Which of the following is true about session management testing?

a) It validates secure handling of user sessions

b) It validates performance

c) It validates usability

d) It validates integration

View Answer

Correct answer: A — It validates secure handling of user sessions
Which of the following is a tool for web application security testing?

a) Acunetix

b) JMeter

c) Selenium

d) PyTest

View Answer

Correct answer: A — Acunetix
Which of the following is true about penetration testing phases?

a) Planning, scanning, exploitation, reporting

b) Only planning

c) Only scanning

d) Only reporting

View Answer

Correct answer: A — Planning, scanning, exploitation, reporting
Which of the following is a preventive measure against SQL Injection?

a) Stored procedures with parameterization

b) Performance monitoring

c) Usability testing

d) Integration testing

View Answer

Correct answer: A — Stored procedures with parameterization
Which of the following is true about security audits?

a) They review policies and procedures for compliance

b) They validate performance

c) They validate usability

d) They validate integration

View Answer

Correct answer: A — They review policies and procedures for compliance
Which of the following is a common vulnerability in mobile applications?

a) Insecure Data Storage

b) Load imbalance

c) Usability issues

d) Integration errors

View Answer

Correct answer: A — Insecure Data Storage
Which of the following is true about firewall testing?

a) It validates firewall rules and configurations

b) It validates performance

c) It validates usability

d) It validates integration

View Answer

Correct answer: A — It validates firewall rules and configurations
Which of the following is a preventive measure against insecure data storage?

a) Encrypt sensitive data

b) Performance monitoring

c) Usability testing

d) Integration testing

View Answer

Correct answer: A — Encrypt sensitive data
Which of the following is true about penetration testing reports?

a) They document vulnerabilities and remediation steps

b) They validate performance

c) They validate usability

d) They validate integration

View Answer

Correct answer: A — They document vulnerabilities and remediation steps
Which of the following is a tool for network security testing?

a) Nmap

b) JMeter

c) Selenium

d) PyTest

View Answer

Correct answer: A — Nmap
Which of the following is true about intrusion detection systems?

a) They monitor and detect suspicious activities

b) They validate performance

c) They validate usability

d) They validate integration

View Answer

Correct answer: A — They monitor and detect suspicious activities
Which of the following is a preventive measure against brute force attacks?

a) Account lockout policies

b) Performance monitoring

c) Usability testing

d) Integration testing

View Answer

Correct answer: A — Account lockout policies
Which of the following is true about vulnerability management?

a) It involves identification, classification, remediation, and mitigation

b) It validates performance

c) It validates usability

d) It validates integration

View Answer

Correct answer: A — It involves identification, classification, remediation, and mitigation
Which of the following is a common vulnerability in cloud environments?

a) Misconfigured access controls

b) Load imbalance

c) Usability issues

d) Integration errors

View Answer

Correct answer: A — Misconfigured access controls
Which of the following best describes security testing overall?

a) Ensures system is protected against threats and vulnerabilities

b) Ensures only performance correctness

c) Ensures only integration correctness

d) Ensures only usability correctness

View Answer

Correct answer: A — Ensures system is protected against threats and vulnerabilities

Quick Links to Explore